The Scam Archive

Real examples, plainly explained. Search by scam, sender, domain, or phone number and learn the red flags before you click.

Plain language
No jargon
Real screenshots
Not mockups
Shareable tips
Family-friendly

Search the Archive

AI search powered by Algolia

Latest additions

Newest examples in the archive, with the screenshot from each report.

See full archive
Unknown TelegramIndonesia

Fake Indonesian registration page that asks for your Telegram login code and two-step password

An Indonesian-language page titled "Daftar Sekarang" (Register now) says registration for 2026 is open to all people in Indonesia. It asks for your full name as written on your e-KTP identity card and your active Telegram phone number. It then says a code will be sent by an "official Telegram bot" and asks for that 5-digit code, followed by your Telegram two-step verification password. After that it asks for your full address, postal code, province, city and bank name, and tells you to wait 24 hours for an eligibility check. The page never says what you are registering for. It was reported from Indonesia on October 28, 2026, at css4.regnows-dfg[.]com, and the same page was reported on other subdomains of that address since August 21, 2026.

Read more
SMS Job ScamAmazon

Fake Amazon recruiter text sent as a contact card with the job pitch hidden in the notes

An RCS text message from +1 (310) 809-2469 has no written message in it, only a shared contact card named "Job Search". Opening the card shows a second phone number, +1 (305) 784-6420, and a Notes field that holds the job pitch. The note says it is from "Sophia from Amazon's Recruiting Department", says your profile was reviewed, and offers a part-time remote position helping "the merchant" update product information to increase product visibility. The rest of the note is cut off in the screenshot. The phone showed its warning that the message came from an unknown sender and may be spam. The card was received in the United States on October 28, 2026. Putting the pitch inside a contact card instead of the message text may be meant to get past spam filters that read message text.

Read more
Unknown TikTok ShopIndonesia

Fake TikTok Shop refund form that asks how much money you want back

An Indonesian-language page titled "Tiktok Shop" calls itself a "Formulir Pengajuan Refund Saldo" (balance refund request form). It says refunds from TikTok Shop go back automatically to the payment method used at checkout, and shows tabs for TikTok, ShopeePay, DANA, GoPay / Tokopedia and credit cards. It asks you to enter the refund amount in rupiah and press "Ajukan Permintaan" (submit request), and says the money usually arrives in 1 to 3 minutes. It gives a WhatsApp number, 08217553577, as "TikTok Shop Help". According to the saved page analysis, what you enter is sent to a Telegram bot. The page was reported twice from Indonesia on October 27, 2026, at ajukanpermintaan-pengembaliandana-t[.]vercel[.]app, a free hosting address not run by TikTok.

Read more
Unknown ANCSouth Africa

Fake ANC R300 campaign giveaway that asks for your bank account number

A page using the name and logo of the African National Congress (ANC), a South African political party, says the party is "giving out Instant free R300 Rand as part of 2026 campaign for all South Africans". A counter claims 4548 South Africans have already received their R300. The page asks for your bank name and account number, then your name, then says the payment is pending until you complete a "Human verification process". The saved page analysis also recorded a step that asks you to share the page with five WhatsApp groups or 15 friends to unlock the payment. The page was reported from South Africa on October 27, 2026, at shrlnk[.]site, a short-link address that has nothing to do with the ANC.

Read more
Unknown Job ScamRecruitment Phishing

UK jobs page that asks for your Gmail address and password to apply

A page at whitlockfinancials[.]com shows a picture that reads "NEW PLANS FOR UK JOBS", "JOB OPENING !!!" and "APPLY" next to a United Kingdom flag. Under the picture are only two boxes, "gmail address" and "gmail password", and a button that says "Apply now job". There is no company name, job title, job description or contact detail. A real job application never needs your email password. The page was reported from Kenya on October 2 and October 26, 2026.

Read more
Unknown Landers SuperstoreGift Card

Fake Landers Superstore Halloween gift card quiz that asks you to share it on social media

A page using the Landers Superstore name and logo says "Congratulations!" and offers a "Gift card worth €100" for answering a four-question Halloween quiz. Its banner reads "SHARE THE FUN. INVITE YOUR FRIENDS. WIN A LANDERS GIFT CARD!" and lists three steps: share the event on social media, invite your friends to join, and win a gift card, with Facebook, Instagram, TikTok, X and YouTube icons. Below the quiz, a list of comments shows people saying they already won. The page was reported from the Philippines on October 26, 2026, at walgreensprizen[.]com, an address that uses the name of a different company, Walgreens, and has no link to Landers.

Read more
Unknown Axis BankIndia

Fake Axis Bank credit card page with Card Protection Plan and limit increase buttons

A page copies Axis Bank's name, logo and card pictures and says "Apply for Credit Card Online - Get Instant Approval". Below the application offer it shows buttons to deactivate a Card Protection Plan, increase a card limit and use reward points. The page is hosted on free web hosting addresses, not on Axis Bank's real website. The same page was reported at one address on September 8, 2026 and at a second address on October 24, 2026, both from Gujarat, India.

Read more
Unknown IndusInd BankIndia

Fake IndusInd credit card app listing with limit increase and protection fee buttons

A web page is made to look like an app store listing for an "INDUSIND CREDIT CARD" app by "IndusInd Bank Ltd.", with a blue "Install" button, a 4.5 star rating from "386k reviews", "5M+" downloads and a "Verified by IndusInd Bank" badge. Below it are card buttons for a limit increase, removing charges and protection fees. The page is hosted on free web hosting addresses, not on IndusInd Bank's website or a real app store. The same page was reported at one address on October 7, 2026 and at a second address on October 24, 2026, both from India.

Read more
Website Ravel VolunteersVerdant Volunteers

Fake Ravel Volunteers Impact Points Withdrawal Scam

The Verdant Volunteers scam is now operating under the name Ravel Volunteers, at ravelvolunteers[.]org. It is the same crowdfunding withdrawal fee scheme previously run as Verdant Charity and Verdant Volunteers, whose earlier activity appeared focused on Kenya. The site offers fundraising campaigns and volunteer placements, then its own terms let it require a campaign organizer to obtain an "Impact Badge" before the next withdrawal, with Impact Points earned at one point per US dollar donated. On October 23, 2026 CSRF found the Ravel site listing the same US phone number as Verdant Volunteers (+1 385 233 9891), the same Canadian number, near-identical homepage text with the brand name swapped, and the same website build files. Reviewer photos on the Ravel reviews page load from a cloud storage bucket named "verdant". ravelvolunteers[.]org was registered on September 30, 2026, and its reviews page says it began collecting reviews on October 1, 2026, yet it already showed 111 reviews averaging 4.6 out of 5. www.verdantvolunteers[.]org returned "410 Gone" the same day. Do not pay for points or badges to release donations.

Read more

Latest WatchOut alerts

Recent warnings. When an alert matches a scam record or a domain already in the archive, a link to that record is included.

All alerts

Browse by category

Categories with examples in the archive, and how many records each one has.

View all
P

Phishing

Attempts to trick victims into revealing credentials or sensitive info by impersonating trusted services.

17 scams

R

Refund / Invoice Bait

Fake invoices or 'refund' notices that trick victims into calling scammers or installing remote-access tools.

4 scams

T

Tech Support / Remote Access

Scammers claim there is a virus or issue and request remote access or payment for fake fixes.

1 scam

I

Investment / Crypto

Fraudulent investments or crypto scams promising guaranteed returns or exclusive offers.

4 scams

R

Romance / Dating

Emotional manipulation via dating platforms leading to requests for money or gifts.

1 scam

M

Marketplace / Classifieds

Fake listings, rental scams, or overpayment schemes on marketplaces and classifieds.

3 scams

J

Job / Work-From-Home

Fake job offers requiring upfront fees, equipment purchases, or acting as a money mule.

5 scams

A

Advance Fee Fraud

Scammers promise a large payout, inheritance, contract transfer, or released funds, then demand fees, bank details, or identity documents before the money can be received.

4 scams

L

Lottery / Prize

Fraudulent prize claims requiring fees or sensitive info to claim winnings.

2 scams

C

Charity / Disaster Relief

Fake charities exploiting disasters or tragedies to solicit fraudulent donations.

1 scam

S

Shipping / Delivery

Fake delivery notifications tricking victims into clicking malicious links or paying fees.

3 scams

I

Impersonation / Social Media

Accounts or pages impersonating individuals or brands to defraud followers.

2 scams

S

Smishing (SMS Phishing)

Phishing attempts delivered by text message linking to fake sites or requesting responses.

2 scams

E

Extortion / Sextortion

Threats to expose sensitive or fake compromising information unless paid.

2 scams

M

Malware / Attachment

Emails or downloads containing malicious attachments or links to malware.

3 scams

C

Credential Harvesting

Fake websites or forms designed to steal login details, MFA codes, or personal data.

5 scams

C

Crypto Wallet / Exchange Impersonation

Fake crypto wallets, exchanges, or airdrops designed to steal private keys or funds.

3 scams

Quick tip: Pause before you pay

Unexpected refunds, gift-card demands, and urgent invoices are classic pressure tactics. Verify using a trusted phone number or website you already know, not the link you were sent.